PT-2023-23879 · Veritas · Veritas Infoscale Operations Manager

Published 2023-05-10 · Updated 2023-07-14 · CVE-2023-32569

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Veritas InfoScale Operations Manager versions prior to 7.4.2.800 Veritas InfoScale Operations Manager versions 8.x prior to 8.0.410

Description An issue in the InfoScale VIOM web application allows SQL Injection attacks in certain areas, enabling attackers with admin credentials to execute arbitrary SQL commands on the back-end database. This can lead to the creation, reading, updating, or deletion of sensitive data stored in the database.

Recommendations For versions prior to 7.4.2.800, update to version 7.4.2.800 or later. For versions 8.x prior to 8.0.410, update to version 8.0.410 or later.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2023-32569

Affected Products

Veritas Infoscale Operations Manager

References · 3

• https://veritas.com/content/support/en_US/security/VTS23-007 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32569 · Security Note
• https://osv.dev/vulnerability/CVE-2023-32569 · Vendor Advisory